Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
File:                     vTZoYo8N950EfsoNmtz8C2aT4wk.mft (raw, json)
Hash identifier:          ZJzxob9ZLIITypsq7zrrXa62USJB9sOfEi3dRybajEM=
Subject key identifier:   A3:A4:9E:33:88:37:03:27:37:1B:FF:46:24:B9:02:CE:D6:CF:68:11
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Certificate issuer:       /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial:       0199FF902D79EAA169E5C9D0F82402417B10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
Manifest number:          1256
Signing time:             Mon 20 Oct 2025 03:01:02 +0000
Manifest this update:     Mon 20 Oct 2025 03:01:02 +0000
Manifest next update:     Tue 21 Oct 2025 03:01:02 +0000
Files and hashes:         1: 0Om0y2WJnxnezCkTIkUnB1aduws.roa (hash: /h/ZFV7Tyfw4gvX/rM0qUi+sUrGWiAq4SLLKFNedki0=)
                          2: 1-AkEgtFYAeYpvfsAvZdlJuyuVF4.roa (hash: bj7r1qBjXXo6AEdGvTw884ILliGHjEYqfvi7PxgbBxU=)
                          3: 18s6iv28JzN23ACcxvidnV4O018.roa (hash: E520J/m/9e2VHqsrljvZsuWV/dovmSdu9Qn56B7khEk=)
                          4: 7HaXNFSYGxOw3R9L6I0z6V-mXb4.roa (hash: iLQ9KNTQ4u3M1tfa+YEpVxilam6XMDqybBUGCnTqiss=)
                          5: 8GAUp0koq7cLyKDBljD12_gS9fU.roa (hash: TLK0INhWOPZtOAAlZEJ0okbttAxXwilC0/Fin663h4o=)
                          6: 8ezldgsZjdYUFJex6k0Ut1HMEC4.roa (hash: bDkmxhsgqaahY46AsODPGEATa+7WHhbve+WtDMm08R4=)
                          7: A36TtvXMPQL0vuYt-DbADXkioHg.roa (hash: gr5xlNyjdy6ao9YoMSyHuCoI8p4LyFouICazI8UxNgw=)
                          8: EDQ-Yk7isf9sH4FXPQShWflCgog.roa (hash: SaxlXz/G0eyL2HVakqjpN328ugQ4obe8PUCDuMchTeo=)
                          9: N9DT59un9kPPAqydx65unLzNI5M.roa (hash: DR7WQ6lKKlByvf06hUpXgwGsB6j3cg+izla7y1IjfTk=)
                          10: Quc7mdnkYNwrbQhv4ZNnMA-i26Q.roa (hash: qyyVqEo1X6QuUJgPIcFasQ0Ni+mghhtNAyF4nptRM7w=)
                          11: TPMoZhT7pBe3VYwD0yOkrDwG6DI.roa (hash: OH5WytZuz33ouqi8MQK3P99lvzQJRdnWAM/P6DB5FRw=)
                          12: b7dBieR_P9kmLnGcxW0fyaZjeow.roa (hash: 7CjlHKhuVQvksqqfXKK92KNHJPTf/pbKa2kMAV8YPNg=)
                          13: c-Wnlh-kFjP6q7EkrDX-duWttJc.roa (hash: 6Prgxqh9/nVNm4A4c9/ay2pcayT5Dd+P1lar2QOL0DQ=)
                          14: hVFH86LVYnyePIbmaCqfpS5vJKM.roa (hash: Jp2Ho2sVrxwbPVnhT98cuAw+l3HPTfx4q1sSUogMvrs=)
                          15: iL4hRCpLyAzkS7iRbK0kB-K-W-4.roa (hash: ZPL3tMdQLbuvPkq9q+UlEUarVrYcyMhTXlq7N8fBMNw=)
                          16: kPQEqnQ2tyC7d6-aTILssWet_yM.roa (hash: 1lTdkFvpUx4+IWByR4mFr+hq9dYheTg8typs5YnbW5g=)
                          17: pVgxUhCc7dPqvhiu0OhGRnn06X4.roa (hash: H5Zdm7znexs+7FCW+NTfkFJPDw3F/Gamb5QXizhY9Tk=)
                          18: tBvdEHK96-8IqXDimpyAd6-FvfI.roa (hash: kV3wVJLyHXbFkaWXeqnUNYEgcOQg7ySmIasAR3i9gU0=)
                          19: vTZoYo8N950EfsoNmtz8C2aT4wk.crl (hash: H/mP33P0Z1FcOCoOYRSyR+cUrDb7PE8NVd99OJD0EZY=)
                          20: vyDPsQ1FXw7OXoebjCdEso67fJc.roa (hash: 40KxbJ4OGjtphO16wDERCKtpdBirvp5LYlDflcERj1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:90:2d:79:ea:a1:69:e5:c9:d0:f8:24:02:41:7b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
        Validity
            Not Before: Oct 20 03:01:02 2025 GMT
            Not After : Oct 21 03:01:02 2025 GMT
        Subject: CN=a3a49e3388370327371bff4624b902ced6cf6811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5c:f9:91:7d:99:6c:44:21:ef:35:7d:36:e3:
                    4f:a3:39:50:79:b5:ab:35:89:54:ae:22:6e:f6:fb:
                    b8:c5:aa:1e:9f:8e:91:92:e6:26:c3:f1:03:57:78:
                    de:55:45:ae:1e:2e:84:48:9b:e7:1b:71:46:d1:ce:
                    ca:cf:a4:c6:ad:49:11:69:b4:a4:6c:66:36:52:87:
                    a2:12:6c:95:8a:5e:da:2e:e9:eb:5e:ce:86:35:01:
                    c6:1d:d5:17:f2:2f:c5:33:d4:4f:79:31:0c:fd:40:
                    ac:0b:ea:26:19:67:da:a5:1d:04:76:12:38:7f:a6:
                    2e:f7:ef:74:75:f5:2f:c4:30:1f:b4:ce:43:5c:d5:
                    2f:18:78:7b:d4:09:d2:8f:bf:99:f8:d7:2d:1f:bc:
                    9f:0e:59:da:11:81:52:33:42:ee:61:89:77:f5:44:
                    33:dd:63:06:9f:21:4e:12:96:ec:2a:01:ad:d3:a6:
                    3d:06:3e:41:08:92:9e:71:5e:f6:0d:fa:bb:6d:87:
                    fc:29:70:67:8e:af:3f:db:bc:01:38:3f:68:9a:79:
                    60:90:25:66:c1:43:17:48:63:80:08:95:45:39:dc:
                    65:ec:13:95:bd:85:e1:25:57:85:f1:f5:c9:30:43:
                    38:03:f1:87:f2:97:a9:58:a7:c2:f0:c4:cf:a1:c9:
                    be:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A4:9E:33:88:37:03:27:37:1B:FF:46:24:B9:02:CE:D6:CF:68:11
            X509v3 Authority Key Identifier:
                keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:1f:9a:61:1d:af:c2:b7:96:9b:b0:30:67:5c:bc:bb:94:01:
         d7:ba:e0:50:2f:ae:31:ab:52:75:97:bc:9c:d6:ec:c6:24:b1:
         48:67:84:47:fd:ba:88:89:33:94:32:42:7b:38:8f:54:0d:71:
         da:72:f3:d5:77:e8:78:ee:b7:19:5a:e0:24:d3:85:f5:2a:95:
         9c:a1:61:37:e6:60:ca:d3:81:af:76:54:c3:ba:98:54:68:30:
         78:ee:8e:97:80:96:58:d8:db:96:3a:a9:66:c5:20:b9:35:fe:
         96:2f:14:ea:81:42:fe:66:fc:9b:75:5c:f0:63:43:32:76:31:
         2c:7e:85:6e:d1:77:b4:ba:cc:ba:23:6a:65:11:42:9b:57:1e:
         2b:f9:a0:bb:c0:b9:38:85:ff:e8:e6:37:1a:a4:54:1f:08:fa:
         a0:eb:72:48:08:20:bc:12:27:22:a1:5a:30:34:9f:05:8e:06:
         87:07:69:fa:a0:45:2f:b6:0b:ed:d0:f9:ee:e0:c8:ec:2b:25:
         76:eb:f7:b7:72:c4:02:bd:87:5f:d3:a2:81:06:91:fc:3e:92:
         ef:6a:a7:82:3b:1e:24:9a:fe:ad:93:90:34:9b:9f:6c:51:5b:
         1a:2b:56:75:fa:a1:51:2d:f1:b0:f4:40:25:90:5b:8d:61:52:
         8a:50:4b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:52:27 2025 by rpki-client